JP2008181299A - COMMUNICATION ERROR INFORMATION OUTPUT PROGRAM, COMMUNICATION ERROR INFORMATION OUTPUT METHOD, AND COMMUNICATION ERROR INFORMATION OUTPUT DEVICE - Google Patents

Abstract

A method for efficiently identifying a cause of a communication error without modifying a management module.
A communication data obtaining unit 140 ₁ to 140 _3, the management module 120 _{1-120 3} acquires the execution log 121 ₁ to 122 ₃ output by the management module 120 _{1-120 3} addressed from the execution control module 130 The communication pattern repository stores the communication pattern storing the identification information of the control message exchanged between the management modules 120 _{1 to} 120 ₃ and the control target resources 110 _{1 to} 110 ₃ in association with the identification information of the instruction message transmitted to 141 _{1 to} 141 ₃ , the control message that has not been transmitted is specified based on the read communication pattern and the acquired communication log, and information related to the specified control message is stored in the log analysis results 143 _{1 to} 143 ₃ . Output.
[Selection] Figure 1

Description

  In the information processing system in which the first device controls the third device via the second device, the first device communicates between the first device and the second device, or the second device. Relating to a communication error information output program, a communication error information output method, and a communication error information output device that output information related to a communication error that has occurred in communication performed with a third device, in particular, remodeling the second device The present invention relates to a communication error information output program, a communication error information output method, and a communication error information output device that can efficiently identify the cause of the occurrence of a communication error.

  Conventionally, work associated with IT system operation management has been performed mainly by humans such as SE (System Engineer) and operators. In recent years, however, IT systems have become larger and more complex, and there has been a limit to manual operation management. Therefore, a method called “autonomous operation” has been proposed as a method for solving this problem.

  FIG. 14 is a diagram for explaining autonomous operation in a conventional IT system. As shown in the figure, in the case of performing autonomous operation, a management module 20 that manages the resources 10 constituting the IT system and an execution control module 30 that controls the management module 20 are used.

  The management module 20 acquires information or changes settings by sending various control messages to the resource 10. The execution control module 30 operates the plurality of management modules 20 in association with each other by transmitting various control messages to the management module 20 based on the operation management procedure 1 that defines the operation management procedure. Hereinafter, the control message transmitted by the management module 20 is referred to as an “instruction message”.

  In such autonomous operation, the management module 20 autonomously performs processing based on the instruction message transmitted from the execution control module 30 and returns a processing result to the execution control module 30. For this reason, the execution control module 30 cannot confirm the operation of the management module 20 in detail, and this is a subject of autonomous operation. Hereinafter, this problem will be described with an example.

  FIG. 15 is a diagram for explaining a problem of autonomous operation in a conventional IT system. As shown in the figure, for example, it is assumed that the execution control module 30 transmits an instruction message CM1 to the management module 20 based on one procedure defined by the operation management procedure 1 ((1 in the same figure). )reference).

  Upon receiving the instruction message CM1, the management module 20 performs a predetermined process such as transmitting / receiving a packet to / from the resource 10 based on the content of the instruction message CM1 (see (2) in the figure), and completes the process normally. If so, a response message RM1 is transmitted to the execution control module 30 (see (3) in the figure).

  On the other hand, if the execution control module 30 transmits the instruction message CM2 to the management module 20 (see (4) in the figure), the response message RM2 is not transmitted from the management module 20 to the instruction message CM2. Suppose.

In this case, the reason why the response message RM2 is not transmitted is as follows.
(A) The control message CM2 transmitted from the execution control module 30 did not reach the management module 20 (see (5) in the figure)
(B) Control message exchange between the management module 20 and the resource 10 was not completed normally (see (6) in the figure)
(C) Although the response message RM2 was transmitted from the management module 20, the response message RM2 did not reach the execution control module 30 for some reason ((
7) Reference)
And so on.

  However, the execution control module 30 cannot identify the cause of the communication error between the execution control module 30 and the management module 20 or between the management module 20 and the resource 10.

  As a solution to this problem, in general, the execution control module 30 is notified of the status and occurrence of an abnormality in the exchange of control messages performed with the execution control module 30 or the resource 10. The management module 20 is modified.

  For example, in Patent Document 1, in a relay device connected between two communication devices, when a control signal transmitted from one communication device to the other communication device is received, the communication device of the transmission destination A technique for controlling transfer of a control signal transmitted from a communication device that is a transmission source according to a situation is disclosed.

JP-A-5-30150

  However, in the conventional solution described above, it is necessary to modify the management module, and when considering the actual situation of operation, such as restrictions on development resources and backward replacement for past data cannot be secured. Problems arise. Therefore, in the field of operation, it is required to perform autonomous operation without modifying the existing management module.

  However, in many cases, the execution control module and the management module are not originally developed on the premise that they cooperate with each other. It is difficult to associate a control message and a response message exchanged with each other.

  For example, the management module normally outputs an execution log that records the results of communication performed with an execution module or resource, but when communication is performed by multiple sessions, the execution log contains a number of communications. Since the results are mixedly output, it is very difficult to analyze the execution log and associate the instruction message with the control message and the response message.

  Therefore, when an error occurs in the network due to a failure or the like and a response message is not sent from the management module to the instruction message sent from the execution control module, the management module exchanges based on the instruction message. There is a problem in that it is impossible to quickly determine the control message, and it takes a lot of time to identify the cause of the communication error.

  Therefore, how to efficiently identify the cause of the communication error without modifying the management module is an extremely important issue.

  The present invention has been made to solve the above-described problems of the prior art, and a communication error information output program and communication that can efficiently identify the cause of a communication error without modifying the management module. An object of the present invention is to provide an error information output method and a communication error information output device.

  In order to solve the above-described problems and achieve the object, the present invention provides an information processing system in which a first device controls a third device via a second device, the first device and the second device. A communication error information output program for causing a computer to execute an output process of information relating to a communication error that has occurred in communication performed between the second apparatus and the third apparatus, A communication log for acquiring a communication log in which a communication message exchanged between the second device and the third device in response to a control message transmitted from the first device to the second device is recorded. Identification information of the control message exchanged between the second device and the third device in association with the acquisition procedure and the identification information of the control message transmitted from the first device to the second device The system that remembered The message correspondence information is read, based on the read control message correspondence information and the communication log acquired by the communication log acquisition procedure, an unsent control message specifying procedure for specifying an unsent control message that has not been transmitted, A control message information output procedure for outputting information related to an untransmitted control message specified by an untransmitted control message specifying procedure is executed by a computer.

  Further, in the present invention according to the above invention, the communication log acquisition procedure may be performed by the plurality of second devices when the first device transmits a control message to each of the plurality of second devices. The communication log is collected, and the unsent control message specifying procedure has an effect on the unsent control message based on the influence information storing the information on the influence of the transmission of the control message on the transmission of other control messages. It is characterized by specifying an applied control message.

  Further, the present invention is the above invention, wherein the control message correspondence information is associated with identification information of a control message transmitted from the first device to the second device, and the second device and the third device. Storing identification information of the control message exchanged with the device and identification information of the third device, the untransmitted control message specifying procedure reads the control message correspondence information, and the read control message correspondence information; Based on the communication log acquired by the communication log acquisition procedure, the untransmitted control message that has not been transmitted and the second device or the third device that could not transmit the control message are specified.

  In the information processing system in which the first device controls the third device via the second device, the present invention provides communication performed between the first device and the second device or the second device. A communication error information output method in which a computer executes output processing of information related to a communication error that has occurred in communication performed between a device and a third device, from the first device to the second device A communication log acquisition step for acquiring a communication log in which a communication message exchanged between the second device and the third device is recorded in response to the control message transmitted in the first step; Read and read control message correspondence information storing control message identification information exchanged between the second device and the third device in association with control message identification information transmitted to the second device System Based on message correspondence information and the communication log acquired by the communication log acquisition step, an unsent control message specifying step for specifying an unsent control message that has not been transmitted, and an unsent control message specifying step are specified. And a control message information output step for outputting information related to the untransmitted control message.

  Also, in the present invention according to the above invention, the communication log acquisition step includes the steps of the plurality of second devices when the first device transmits a control message to each of the plurality of second devices. The communication log is collected, and the untransmitted control message specifying step has an influence on the untransmitted control message based on the influence information storing information on the influence of the transmission of the control message on the transmission of other control messages. It is characterized by specifying an applied control message.

  Further, the present invention is the above invention, wherein the control message correspondence information is associated with identification information of a control message transmitted from the first device to the second device, and the second device and the third device. Storing control message identification information and third device identification information exchanged with the device, the untransmitted control message specifying step reads the control message correspondence information, and the read control message correspondence information; Based on the communication log acquired by the communication log acquisition step, the second device or the third device that could not transmit the untransmitted control message and the control message that were not transmitted are specified.

  In the information processing system in which the first device controls the third device via the second device, the present invention provides communication performed between the first device and the second device or the second device. A communication error information output device that outputs information related to a communication error that has occurred in communication performed between a device and a third device, the control transmitted from the first device to the second device A communication log acquisition means for acquiring a communication log in which a communication message exchanged between the second device and the third device in response to the message is recorded, and from the first device to the second device Read out the control message correspondence information storing the identification information of the control message exchanged between the second device and the third device in association with the identification information of the transmitted control message, and read out the control message correspondence information When, Based on the communication log acquired by the communication log acquisition means, an untransmitted control message specifying means for specifying an untransmitted control message that has not been transmitted, and an untransmitted control message specified by the untransmitted control message specifying means And control message information output means for outputting information related to the above.

  Further, the present invention is the above invention, wherein the communication log acquisition means is configured such that when the first device transmits a control message to each of the plurality of second devices, the plurality of second devices The communication log is collected, and the untransmitted control message specifying means has an influence on the untransmitted control message based on the influence information storing information on the influence of the transmission of the control message on the transmission of other control messages. It is characterized by specifying an applied control message.

  Further, the present invention is the above invention, wherein the control message correspondence information is associated with identification information of a control message transmitted from the first device to the second device, and the second device and the third device. Storing identification information of the control message exchanged with the device and identification information of the third device, the untransmitted control message specifying means reads the control message correspondence information, and the read control message correspondence information; Based on the communication log acquired by the communication log acquisition means, an untransmitted control message that has not been transmitted and a second device or a third device that has failed to transmit the control message are identified.

  According to the present invention, a communication log in which a communication message exchanged between a second device and a third device in response to a control message transmitted from the first device to the second device is recorded. And stores the identification information of the control message exchanged between the second device and the third device in association with the identification information of the control message transmitted from the first device to the second device. Control message correspondence information is read, based on the read control message correspondence information and the acquired communication log, an unsent control message that has not been transmitted is identified, and information related to the identified unsent control message is output. The control message transmitted from the first device to the second device can be easily associated with the control message exchanged between the second device and the third device. The result, without modifying the second device, an effect that the cause of the communication error occurs can be efficiently identified.

  Further, according to the present invention, when the first device transmits a control message to each of the plurality of second devices, the communication log is collected from the plurality of second devices, and the transmission of the control message is performed separately. When a communication error occurs in the transmission of a certain control message, the control message that has influenced the unsent control message is identified based on the influence information that stores the information on the influence on the transmission of the control message. In addition, it is possible to specify another control message that has affected the transmission of the control message, and it is possible to specify the root cause of the occurrence of a communication error.

  According to the present invention, the control message correspondence information is associated with the identification information of the control message transmitted from the first device to the second device, between the second device and the third device. The identification information of the exchanged control message and the identification information of the third device are stored, the control message correspondence information is read, and the untransmitted control that has not been transmitted based on the read control message correspondence information and the communication log Since the second device or the third device that has failed to transmit the message and the control message is specified, it is possible to specify the device that causes the communication error.

  Exemplary embodiments of a communication error information output program, a communication error information output method, and a communication error information output device according to the present invention will be described below in detail with reference to the accompanying drawings. In this embodiment, a case will be described in which the present invention is applied to an IT resource control apparatus that controls IT system resources by autonomous operation.

First, the outline and configuration of the IT resource control apparatus according to the first embodiment will be described. FIG. 1 is a diagram for explaining the outline and configuration of the IT resource control apparatus according to the first embodiment. As shown in the figure, the IT resource control device 100 is a device that controls the control target resources 110 _{1 to} 110 ₃ by autonomous operation, and includes management modules 120 _{1 to} 120 ₃ , an execution control module 130, and communication data. Acquisition units 140 _{1 to} 140 ₃ .

In the IT resource control apparatus 100 according to the first embodiment, the management modules 120 _{1 to} 120 ₃ and the execution control module 130 have the same functions as the management module 20 and the execution control module 30 shown in FIG. 14, respectively. However, it differs from the IT system shown in FIG. 14 in that it has communication data acquisition units 140 _{1 to} 140 ₃ . Hereinafter, each functional unit included in the IT resource control apparatus 100 will be described.

The management modules 120 _{1 to} 120 ₃ are processing units that acquire information, change settings, and the like by transmitting various control messages to the control target resources 110 _{1 to} 110 ₃ . Further, when the management modules 120 _{1 to} 120 ₃ communicate with the execution control module 130 or the control target resources 110 _{1 to} 110 ₃ , respectively, the execution logs 121 ₁ to 121 ₁ record the communication data exchanged by the communication. 121 ₃ is output.

Figure 2 is a diagram showing an example of the execution log 121 ₁ to 121 ₃ output by the management module 120 _{1-120 3} according to the first embodiment. The execution logs shown in FIGS. 9A and 9B are execution logs output by different management modules.

  As shown in the figure, for example, the execution log identifies “No. c” indicating the sequence number for each communication data, “time” indicating the time when the communication data is transmitted, and the session that transmitted the communication data. "Session ID", "transmission source" indicating a device that is a transmission source of communication data, "destination" indicating a device that is a transmission destination of communication data, and "protocol" used for transmission of communication data It consists of “protocol”, “control content” indicating the type of communication data, and “parameter” indicating the parameter value set in the communication data.

  Here, the execution log shown in FIG. 5A is output by the management module A. The execution log includes an instruction message (No. 1) transmitted from the execution control module 130 to the management module A. c = 1 communication data), a control message (No. c = 2-7 communication data) exchanged between the management module A and the control target resource based on the instruction message, and the management module A failure message transmitted from A to the execution control module 130 (response message indicating that processing for the instruction message has not been performed normally) (communication data of No. c = 8) is recorded.

  On the other hand, the execution log shown in FIG. 7B is output by the management module B, and the execution log includes an instruction message (No. c) transmitted from the execution control module 130 to the management module B. = 1), a control message (communication data of No. c = 2 to 8) exchanged bidirectionally between the management module B and the control target resource based on the instruction message, and the management module B And a success message (response message indicating that the processing for the instruction message has been normally performed; communication data of No. c = 9) transmitted to the execution control module 130 is recorded.

In addition, although the execution log shown to the same figure (a) and (b) has shown only the session whose session ID is "SS1" and "SS2", respectively, the execution log 121 ₁ -121 ₃ contains two or more. The communication data related to the communication performed by the session is recorded together.

Returning to FIG. 1, the execution control module 130 transmits various control messages to and from the management modules 120 _{1 to} 120 ₃ based on the operation management procedure 1 that defines the operation management procedure. This is a processing unit that operates the management modules 120 _{1 to} 120 ₃ in cooperation with each other.

Communication data obtaining unit 140 ₁ to 140 _3, based on the management module 120 ₁ execution log 121 ₁ output by the communication performed between the execution control module 130 and the management module 120 _{1-120 3,} or manage It is a processing unit that outputs information relating to the cause of a communication error that has occurred in communication performed between the modules 120 _{1 to} 120 ₃ and the control target resources 110 _{1 to} 110 ₃ . Note that the communication data acquisition units 140 _{1 to} 140 ₃ all have the same configuration, and therefore the communication data acquisition unit 140 ₁ will be described as an example here.

As shown in the figure, the communication data acquisition unit 140 ₁ includes a communication pattern repository 141 ₁ and a log analysis unit 142 ₁ (the communication data acquisition unit 140 ₂ includes a communication pattern repository 141 ₂ and a log analysis unit 142. ₂ , the communication data acquisition unit 140 ₃ includes a communication pattern repository 141 ₃ and a log analysis unit 142 ₃ ). The following describes each functional unit communication data acquiring unit 140 ₁ has.

Communication pattern repository 141 _1, an instruction message transmitted from the execution control module 130 to the management module 120 _1, the control exchanged between the management module 120 ₁ based on the control messages and the control target resources 110 ₁ It is a memory | storage part which memorize | stores the communication pattern which matched the group of messages for every instruction | indication message.

FIG. 3 is a diagram illustrating an example of the communication pattern repository 141 _{1 according to} the first embodiment. As shown in the figure, the communication pattern repository 141 ₁ specifically records “transmission source”, “destination”, “protocol”, “control content”, and “parameter” in the execution log 121 _1. It memorize | stores corresponding to the item of communication data. The communication pattern repositories shown in FIGS. 2A and 2B show the communication pattern repositories of the management module A and the management module B that output the execution log shown in FIG.

As described above, when all the processes performed based on the instruction message transmitted from the execution control module 130 are normally performed, the communication pattern repository 141 ₁ results in the management module 120 ₁ and the control target resource 110 being processed. A set of all control messages exchanged with ₁ is stored in association with the instruction message.

The log analysis unit 142 ₁ identifies the cause of the communication error based on the execution log 121 ₁ and the communication pattern repository 141 ₁ output by the management module 120 ₁ , and includes a log including information relating to the identified cause of the communication error This is a processing unit that outputs the analysis result 143 ₁ .

Specifically, the log analysis unit 142 ₁ first exchanges between the management module 120 ₁ and the control target resource 110 ₁ according to the instruction message transmitted from the execution control module 130 to the management module 120 ₁ . The execution log 121 ₁ in which the communication message is recorded is acquired, and the communication data recorded in the acquired execution log 121 ₁ is divided for each session.

Subsequently, the log analysis unit 142 ₁ compares the execution log 121 ₁ divided for each session with the communication pattern stored in the communication pattern repository 141 ₁ , thereby executing the execution control module 130 and the management modules 120 _{1 to} 120. ₃ , it is determined whether or not an abnormality has occurred in the communication performed with the communication module ₃ or the communication performed between the management modules 120 _{1 to} 120 ₃ and the control target resources 110 _{1 to} 110 ₃ .

Here, if it is determined that the abnormality has occurred, the log analysis unit 142 _1, communication data that caused the anomaly, i.e., identifies the communication data transmitted and received is not performed normally. Then, the log analysis unit 142 ₁ generates and outputs a log analysis result 143 ₁ including information related to the specified communication data (the log analysis unit 142 ₂ outputs the log analysis result 143 ₂ to the log analysis unit 142. ₃ outputs the log analysis result 143 ₃ ).

Next, the procedure for the log analysis unit 142 ₁ described above, will be described in detail. FIG. 4 is a flowchart illustrating the processing procedure of the log analysis unit 1421 according to the _first embodiment. As shown in the figure, the log analysis unit 142 ₁ first reads the execution log 121 ₁ (step S101), divides the read execution log 121 ₁ by session, and stores it in the internal memory as an execution log for each session. (Step S102).

Subsequently, the log analysis unit 142 _1, from the execution log for each session that is stored in the internal memory, reads one piece of execution log (step S103). Here, the log analysis unit 142 _1, when read execution log was not (step S104, No), the process ends.

On the other hand, if there is an execution log to read (step S104, Yes), the log analysis unit 142 ₁ reads one line communication data from the the execution log (step S105). If the end of the execution log has not yet been reached (No at step S106), the log analysis unit 142 ₁ stores a communication pattern including a message matching the communication data in the communication pattern repository 141 _1. The communication pattern is searched for (step S107).

At this time, if the communication data is communication data in the first line of the execution log, the log analysis unit 142 ₁ selects a communication pattern from the messages stored in the communication pattern repository 141 ₁ as described above. If the second and subsequent lines are searched, a communication pattern is searched for from the matching patterns stored in the internal memory in step S109 described later.

Then, when there is a communication pattern including a message that matches the communication data (step S108, Yes), the log analysis unit 142 ₁ is stored in the internal memory the communication pattern as the matching pattern (step S109) .

Here, when storing the communication pattern as the matching pattern, the log analysis unit 142 ₁ gives a flag to each message included in the communication pattern, and further reads the communication data read from the execution log. For a message that is confirmed to match, check its flag.

Thereafter, the log analysis unit 142 ₁ returns to step S105, reads the next communication data from the execution log, and repeats the above processing.

On the other hand, (step S108, No), the log analysis unit 142 ₁ when there is no communication pattern including a message that matches the communication data, determines that the communication data is indicative of abnormal communication error After the cause location determination process for identifying the cause of the error (step S112), the determination result for each session is output as “abnormal” (step S113). The cause location specifying process will be described later in detail.

By the way, when the log analysis unit 142 ₁ detects the end of the execution log when reading one line of communication data from the execution log (Yes in step S106), the process is normal for each session. A normal / abnormal determination process is performed to determine whether or not the process has ended (step S110). The normal / abnormal determination process will be described later in detail.

Then, as a result of normal / abnormality determination process, if it is determined that an abnormality has occurred (step S 111, Yes), the log analysis unit 142 _1, after the cause place specifying process (step S112), the session Each determination result is output as “abnormal” (step S113).

Incidentally, as a result of the normal / abnormal determination process, if it is determined that a normal (step S 111, No), the log analysis unit 142 ₁ without deducing the cause process, the determination result of each session Is output as “normal” (step S113).

Next, the processing procedure of the normal / abnormal determination process shown in FIG. 4 will be described. FIG. 5 is a flowchart showing a processing procedure of normality / abnormality determination processing shown in FIG. As shown in the figure, in this normal / abnormal determination process, the log analysis unit 1421 _first reads one communication pattern from the matching pattern stored in the internal memory (step S201).

Here, the matching pattern in the case of load communication pattern (step S202, Yes), the log analysis unit 142 ₁ checks whether the flag of all the messages included in the communication pattern is checked, If all the flags have not been checked (No at Step S203), the communication pattern is registered as an incomplete pattern (Step S204).

On the other hand, if all the flag is checked (step S203, Yes), the log analysis unit 142 _1, the judgment result of the session is "normal" (step S205).

Also, when reading communication pattern from the matching pattern stored in the internal memory, if the communication pattern is not read (step S202, No), the log analysis unit 142 _1, complete non that are registered at that time The pattern is output to the internal memory (step S206), and the session determination result is “abnormal” (step S207).

Next, the procedure of the cause location determination process shown in FIG. 4 will be described. FIG. 6 is a flowchart showing a processing procedure of the cause location determination process shown in FIG. As shown in the figure, in the cause location determination process, the log analysis unit 1421 _first reads the incomplete pattern and the execution log for each session stored in the internal memory (step S301).

Subsequently, the log analysis unit 142 ₁ compares the execution log and the incomplete pattern read in the execution log, and extracts the first communication data that does not match the message contained in incomplete pattern (step S302). Here, for example, if the execution log is the execution log shown in FIG. 2A and the incomplete pattern is the communication pattern shown in FIG. 3A, the log analysis unit 142 ₁ And the No. of the execution log in FIG. = 7 communication data is extracted.

Then, the log analysis unit 142 ₁ identifies a transmission source from the extracted communication data (step S303), and generates and outputs a log analysis result 143 ₁ including information regarding the transmission source and communication data that has become a difference. (Step S304).

As described above, in the first embodiment, the communication data acquisition units 140 _{1 to} 140 ₃ are managed by the management module 120 ₁ according to the instruction message transmitted from the execution control module 130 to the management modules 120 _{1 to} 120 ₃ . 120 ₃ and the control target resources 110 ₁ exchanges communication messages obtains the execution log 121 ₁ to 122 ₃ that is recorded with the 110 _3, the management module 120 ₁ to 120 ₃ addressed from the execution control module 130 A communication pattern storing the identification information of the control message exchanged between the management modules 120 _{1 to} 120 ₃ and the control target resources 110 _{1 to} 110 ₃ in association with the identification information of the instruction message to be transmitted is a communication pattern repository 141. _1-141 read from _3, and the read-out communication pattern, the communication log acquired Based on, identify the control message was not sent, transmits the information relating to the identified control messages because the log analysis result 143 _{1-143 3,} the management module 120 _{1-120 3} addressed from the execution control module 130 an instruction message, the management module 120 _{1-120 3} and it is possible to easily associate the interaction control message between the control target resource _{1101 3,} the management module 120 _{1-120 3} The cause of the communication error can be identified efficiently without modification.

In the first embodiment, the communication pattern repositories 141 _{1 to} 141 _{3 associate} the control message correspondence information with the identification information of the control message transmitted from the execution control module 130 to the management modules 120 _{1 to} 120 _3. Communicates identification information of control messages exchanged between the management modules 120 _{1 to} 120 ₃ and the control target resources 110 _{1 to} 110 _3, and identification information of the management modules 120 _{1 to} 120 ₃ and the control target resources 110 _{1 to} 110 ₃ The log analysis units 142 _{1 to} 141 ₃ read out the communication patterns and transmit the control messages and control messages that were not transmitted based on the read communication patterns and the execution logs 121 _{1 to} 121 _3. that could not manage module 120 _{1-120 3} or the control object Since identify the source _{1101 3,} it is possible to identify the cause of a communication failure device.

In the first embodiment, the communication data acquisition units 140 _{1 to} 140 ₃ acquire the execution logs 121 _{1 to} 121 ₃ output from the management modules 120 _{1 to} 120 ₃ , respectively. The case where the cause that occurred was specified was explained. However, by checking the execution log output from each management module, the cause of the communication error should be specified in consideration of the correlation and causality between the processes performed by each management module. May be.

  Therefore, in the following, such a case will be described as a second embodiment. Here, for convenience of explanation, functional units that play the same functions as the respective units shown in FIG.

First, the outline and configuration of the IT resource control apparatus according to the second embodiment will be described. FIG. 7 is a diagram for explaining the outline and configuration of the IT resource control apparatus according to the second embodiment. As shown in the figure, the IT resource control device 200 is a device that controls the control target resources 110 _{1 to} 110 ₃ by autonomous operation, and includes management modules 120 _{1 to} 120 ₃ , an execution control module 130, and communication data. Acquisition units 240 ₁ to 240 ₃ and a log collection module 250 are included.

In the IT resource control apparatus 200 according to the second embodiment, the management modules 120 _{1 to} 120 ₃ and the execution control module 130 have the same functions as the management module 20 and the execution control module 30 shown in FIG. 14, respectively. but a communication data acquiring unit 240 ₁ to 240 _3, that it has a logging module 250 is different from that of the iT system shown in FIG. 14.

Communication data acquisition unit 240 ₁ to 240 ₃ obtains the management module 120 _{1-120 3} execution logs 121 ₁ to 121 ₃ output by a processing unit that outputs to the log collection module 250.

Logging module 250, a communication based on the communication data acquisition unit 240 ₁ to 240 ₃ execution logs 121 ₁ to 121 ₃ output from, performed between the execution control module 130 and the management module 120 _{1-120 3,} Alternatively, the processing unit outputs information related to a communication error that has occurred in communication performed between the management modules 120 _{1 to} 120 ₃ and the control target resources 110 _{1 to} 110 ₃ .

  The log collection module 250 includes a combined communication pattern repository 251 and a combined log analysis unit 252 as shown in FIG. Hereinafter, each functional unit included in the log collection module 250 will be described.

The combined communication pattern repository 251 includes an instruction message transmitted from the execution control module 130 to the management modules 120 _{1 to} 120 ₃ , and the management modules 120 _{1 to} 120 ₃ and the control target resources 110 _{1 to} 110 based on the control message. ₃ is a storage unit that stores, for each instruction message, a communication pattern in which a set of control messages exchanged with ₃ is associated.

FIG. 8 is a diagram illustrating an example of the combined communication pattern repository 251 according to the second embodiment. As shown in the figure, in the combined communication pattern repository 251, specifically, “transmission source”, “destination”, “protocol”, “control content”, and “parameter” are recorded in the execution log 121 _1. It memorizes corresponding to the item of communication data. The combined communication pattern repositories shown in FIGS. 2A and 2B are the combined communication pattern repositories of the management module A and the management module B that output the execution logs shown in FIGS. 2A and 2B, respectively. Show.

Here, the point that the combined communication pattern repository 251 stores the above items is the same as the communication pattern repositories 141 _{1 to} 141 ₃ (see FIG. 3) described in the first embodiment. Are stored in association with “constraints and effects on other processes”. Here, the “constraint and influence on other processes” is information indicating the influence of the transmission of the control message on the transmission of another control message.

  For example, in the “constraint and influence on other processes”, information indicating that exclusive input is essential (refer to the control message of No. = 1 shown in FIG. 8A), the use of the corresponding resource, etc. Information indicating that the process is forcibly failed (see the control message of No. 6 shown in FIG. 8A), and information indicating that the process is failed if the user to be processed is already logged in (Refer to the control message No. 6 shown in FIG. 8B). Note that “constraints and effects on other processes” are not set for anything that does not affect the transmission of other control messages.

Returning to FIG. 7, the combined log analysis unit 252 identifies the cause of the communication error based on the execution logs 121 _{1 to} 121 ₃ and the combined communication pattern repository 251 ₁ output from the communication data acquisition units 240 ₁ to 240 _3. And a processing unit that outputs a log analysis result 254 including information relating to the cause of the identified communication error.

Specifically, the coupling log analyzer 252 first collects execution logs 121 ₁ to 121 ₃ output by the communication data obtaining unit 240 ₁ to 240 _3, coupling an execution log 121 ₁ to 121 ₃ collected Thus, the combined log 253 is generated. FIG. 9 is a diagram illustrating an example of the combined log 253 according to the second embodiment. This figure shows a combined log 253 when the execution logs shown in FIGS. 2A and 2B are combined.

  No. shown in FIG. The communication data of c = 1 to 7, 16, and 17 are the communication data included in the execution log shown in FIG. The communication data of c = 8-15 is the communication data included in the execution log shown in FIG.

While generating the combined log 253, the combined log analysis unit 252 divides the execution logs 121 _{1 to} 121 ₃ output from the communication data acquisition units 240 ₁ to 240 ₃ for each management module and each session.

Subsequently, the combined log analysis unit 252 compares the execution logs 121 _{1 to} 121 ₃ divided for each management module and for each session with the communication patterns stored in the combined communication pattern repository 251 in the first embodiment. Similar to the described log analysis units 142 _{1 to} 142 ₃ , communication performed between the execution control module 130 and the management modules 120 _{1 to} 120 ₃ , or the management modules 120 _{1 to} 120 ₃ and the control target resource 110 _1. abnormality determining whether occurred to communications performed between the 110 _3, when it is determined that an abnormality has occurred, the communication data that caused the anomaly, i.e., normal The communication data that has not been transmitted or received is specified.

  Here, the combined log analysis unit 252 further determines other communication data that has influenced the communication data identified as abnormal based on the combined log 253 and the communication pattern stored in the combined communication pattern repository 251. Check whether or not exists.

  Then, the combined log analysis unit 252 includes information related to the communication data that has caused the abnormality, and information related to the communication data if there is communication data that has affected the communication data. A log analysis result 254 including is generated and output.

Next, the processing procedure of the combined log analysis unit 252 described above will be described in detail. FIG. 10 is a flowchart illustrating the processing procedure of the combined log analysis unit 252 according to the second embodiment. As shown in the figure, the combined log analysis unit 252 first generates a combined log 253 based on the execution logs 121 _{1 to} 121 ₃ (step S401), and further stores the execution logs 121 _{1 to} 121 ₃ as management modules and It is divided in units of sessions and stored in the internal memory as a management module / per-session execution log (step S402).

Subsequently, the combined log analysis unit 252 is based on the management module / session execution log and the combined communication pattern repository 251 stored in the internal memory, similarly to the log analysis units 142 _{1 to} 142 ₃ described in the first embodiment. communication is performed between the execution control module 130 and the management module 120 _{1-120 3,} or abnormal communications performed between the management module 120 _{1-120 3} and the control target resource _{1101 3} Whether or not has occurred is determined (step S403).

  If no abnormality has occurred (step S404, No), the combined log analysis unit 252 sets the determination result to “normal” (step S405) and ends the process. On the other hand, if an abnormality has occurred (step S404, Yes), the determination result is “abnormal” (step S406), a cause location determination process based on the dependency is performed (step S407), and the process ends. The cause location determination process based on this dependency will be described in detail below.

  Next, the procedure of the cause location determination process based on the dependency shown in FIG. 10 will be described. FIG. 11 is a flowchart illustrating a processing procedure of a cause location determination process based on the dependency relationship illustrated in FIG. 10. FIG. 12 is a diagram showing an example of the cause location specifying process based on the dependency relationship. The combined log shown in FIG. 12A is the same as the combined log shown in FIG. The combined communication pattern repository shown in FIG. 8B is the same as the combined communication pattern repository shown in FIG.

  As shown in FIG. 11, in the cause location determination process based on this dependency relationship, the combined log analysis unit 252 first combines the combined log 253, the incomplete pattern stored in the internal memory, and the management module / session execution log. Read (step S501).

  Subsequently, the combined log analysis unit 252 performs the same procedure as the cause location determination process (see FIG. 6) described in the first embodiment, and the first communication data that does not match the message included in the uncompleted pattern in the execution log. Is extracted (step S502).

  Here, for example, if the execution log is the execution log shown in FIG. 2A and the incomplete pattern is the communication pattern shown in FIG. 3A, the combined log analysis unit 252 And the No. of the execution log in FIG. = 7 communication data is extracted.

  Then, the combined log analysis unit 252 associates the extracted communication data with the combined log 253 (step S503). Specifically, the combined log analysis unit 252 searches the combined log 253 based on the extracted communication data, and specifies communication data corresponding to the communication data.

  For example, when the combined log shown in FIG. 12 (a) is used, the combined log analysis unit 252 displays the No. of the execution log in FIG. The communication data shown in (1) of FIG. 12A is specified as the communication data corresponding to the communication data = 7.

  Further, the combined log analysis unit 252 extracts all communication patterns having values set in the “constraint and influence on other processes” from the combined communication pattern repository 251 (step S504), and then combines with the extracted communication patterns. Association with the log 253 is performed (step S505). Specifically, the combined log analysis unit 252 searches the combined log 253 based on the extracted communication pattern, and specifies communication data that matches the communication pattern.

  For example, when the combined log shown in FIG. 12A is used, the combined log analysis unit 252 uses the communication pattern shown in (2) of FIG. The communication data to be indicated is specified.

  Then, the combined log analysis unit 252 evaluates the influence range of the restriction by the communication data specified in step S505 (step S506). Specifically, the combined log analysis unit 252 determines whether or not the communication data identified in step S503 is affected by the restriction due to the communication data identified in step S505. Here, it is assumed that a method for determining whether or not there is an influence of a restriction by certain communication data is determined in advance according to the type of “restriction and influence on other processes” of the communication pattern corresponding to the communication data.

  For example, the range of influence of the restriction by the communication data shown in (3) of FIG. 12A is that “the restriction and the influence on other processes” is “the other process using the corresponding resource is forcibly failed”. The communication data that is affected by the restriction due to the communication data is communication data that is transmitted after the communication data that affects the communication data, and is communication data that has the same control target resource to be processed. Thus, in the example shown in FIG. 12, the communication data shown in (1) of FIG. 12A is affected by the restriction due to the communication data shown in (3).

  Thus, the combined log analysis unit 252 determines whether or not the communication data specified in step S503 is affected by the restriction by the communication data specified in step S505. In step S507, No), it is determined that the causal relationship of the communication data is unknown (step S508).

  On the other hand, when it determines with having received the influence (step S507, Yes), the combined log analysis part 252 uses the communication data data specified by step S503 as a constraint which caused the data specified by step S505. As a failure, a log analysis result 254 including information related to each communication data is generated, and the generated log analysis result 254 is output (step S509).

As described above, in the second embodiment, when the execution control module 130 transmits an instruction message to each of the plurality of management modules 120 _{1 to} 120 ₃ , the log collection module 250 uses the plurality of management modules 120 _1. Execution information 121 ₁ to 121 ₃ is collected from ˜120 _3, and the influence information storing information related to the influence of the transmission of the control message on the transmission of other control messages (“restriction and other processes to the combined communication pattern repository 251” is stored. The control message that affected the control message that was not transmitted is identified based on the influence of the control message), so that if a communication error occurs in the transmission of a certain control message, the control message transmission is affected. It is possible to identify other control messages It is possible to identify the root cause.

  In the above embodiment, the case where the IT resource control apparatus has three management modules has been described. However, the present invention is not limited to this, and less than three management modules or more than three management modules. The same can be applied to the case of having.

  In the above embodiment, the case where the management module, the execution control module, the communication data acquisition unit, and the log collection module are all provided in one IT resource control device has been described. However, each processing unit is a different device. May be provided.

  Moreover, although the IT resource control apparatus has been described in the above embodiment, a communication error information output program having the same function can be obtained by realizing the configuration described above by software. A computer that executes this communication error information output program will be described.

  FIG. 13 is a functional block diagram illustrating a configuration of a computer that executes a communication error information output program. As shown in the figure, the computer 300 includes a RAM (Random Access Memory) 310, a CPU (Central Processing Unit) 320, an HDD (Hard Disk Drive) 330, a LAN (Local Area Network) interface 340, and an input. An output interface 350 and a DVD (Digital Versatile Disk) drive 360 are included.

  The RAM 310 is a memory that stores a program, a program execution result, and the like. The CPU 320 is a central processing unit that reads a program from the RAM 310 and executes the program.

  The HDD 330 is a disk device that stores programs and data, and the LAN interface 340 is an interface for connecting the computer 300 to other computers via the LAN.

  The input / output interface 350 is an interface for connecting an input device such as a mouse or a keyboard and a display device, and the DVD drive 360 is a device for reading / writing a DVD.

  The communication error information output program 311 executed in the computer 300 is stored in the DVD, read from the DVD by the DVD drive 360, and installed in the computer 300.

  Alternatively, the communication error information output program 311 is stored in a database or the like of another computer system connected via the LAN interface 340, read from these databases, and installed in the computer 300.

  The installed communication error information output program 311 is stored in the HDD 330, read out to the RAM 310, and executed by the CPU 320 as the communication error information output process 321.

  In addition, among the processes described in the above embodiment, all or a part of the processes described as being automatically performed can be manually performed, or the processes described as being performed manually can be performed. All or a part can be automatically performed by a known method.

  In addition, the processing procedure, control procedure, specific name, and information including various data and parameters shown in the above-described document and drawings can be arbitrarily changed unless otherwise specified.

  Each component of each illustrated device is functionally conceptual and does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution / integration of each device is not limited to that shown in the figure, and all or a part thereof may be functionally or physically distributed or arbitrarily distributed in arbitrary units according to various loads or usage conditions. Can be integrated and configured.

  Furthermore, all or a part of each processing function performed in each device may be realized by a CPU and a program that is analyzed and executed by the CPU, or may be realized as hardware by wired logic.

(Supplementary note 1) In an information processing system in which a first device controls a third device via a second device, communication performed between the first device and the second device or a second device A communication error information output program for causing a computer to execute output processing of information related to a communication error that has occurred in communication performed with a third device,
Communication for obtaining a communication log in which a communication message exchanged between the second device and the third device is recorded in response to a control message transmitted from the first device to the second device Log acquisition procedure;
A control storing identification information of a control message exchanged between the second device and the third device in association with identification information of a control message transmitted from the first device to the second device Reading the message correspondence information, based on the read control message correspondence information and the communication log acquired by the communication log acquisition procedure, an unsent control message specifying procedure for specifying an unsent control message that has not been transmitted,
A control message information output procedure for outputting information related to an unsent control message identified by the unsent control message identification procedure;
A communication error information output program for causing a computer to execute

(Appendix 2) The communication log acquisition procedure collects communication logs from the plurality of second devices when the first device transmits control messages to the plurality of second devices, respectively.
The unsent control message identification procedure identifies the control message that has influenced the unsent control message based on the influence information that stores information related to the effect of the transmission of the control message on the transmission of other control messages. The communication error information output program according to appendix 1, wherein:

(Supplementary Note 3) The control message correspondence information is exchanged between the second device and the third device in association with the identification information of the control message transmitted from the first device to the second device. Storing the identification information of the control message and the identification information of the third device,
The unsent control message specifying procedure reads the control message correspondence information, and based on the read control message correspondence information and the communication log acquired by the communication log acquisition procedure, an unsent control message that has not been transmitted and The communication error information output program according to appendix 1 or 2, wherein the second device or the third device that has failed to transmit the control message is specified.

(Appendix 4) In an information processing system in which the first device controls the third device via the second device, communication between the first device and the second device or the second device A communication error information output method in which a computer executes output processing of information relating to a communication error that has occurred in communication performed with a third device,
Communication for obtaining a communication log in which a communication message exchanged between the second device and the third device is recorded in response to a control message transmitted from the first device to the second device Log acquisition process;
A control storing identification information of a control message exchanged between the second device and the third device in association with identification information of a control message transmitted from the first device to the second device Reading the message correspondence information, based on the read control message correspondence information and the communication log acquired by the communication log acquisition step, an unsent control message specifying step for specifying an unsent control message that has not been transmitted,
A control message information output step for outputting information related to the untransmitted control message specified by the untransmitted control message specifying step;
A communication error information output method comprising:

(Appendix 5) The communication log acquisition step collects communication logs from the plurality of second devices when the first device transmits a control message to each of the plurality of second devices.
The unsent control message identifying step identifies a control message that has influenced the unsent control message based on the influence information that stores information related to the effect of the transmission of the control message on the transmission of another control message. The communication error information output method according to appendix 4, wherein:

(Supplementary Note 6) The control message correspondence information is exchanged between the second device and the third device in association with the identification information of the control message transmitted from the first device to the second device. Storing the identification information of the control message and the identification information of the third device,
The unsent control message specifying step reads out the control message correspondence information, and based on the read control message correspondence information and the communication log acquired by the communication log acquisition step, an unsent control message that has not been transmitted and 6. The communication error information output method according to appendix 4 or 5, wherein the second device or the third device that has failed to transmit the control message is specified.

(Supplementary note 7) In the information processing system in which the first device controls the third device via the second device, communication between the first device and the second device or the second device A communication error information output device that outputs information related to a communication error that has occurred in communication performed with a third device,
Communication for obtaining a communication log in which a communication message exchanged between the second device and the third device is recorded in response to a control message transmitted from the first device to the second device Log acquisition means;
A control storing identification information of a control message exchanged between the second device and the third device in association with identification information of a control message transmitted from the first device to the second device Read the message correspondence information, based on the read control message correspondence information and the communication log acquired by the communication log acquisition means, an unsent control message specifying means for specifying an unsent control message that has not been transmitted,
Control message information output means for outputting information related to the untransmitted control message specified by the untransmitted control message specifying means;
A communication error information output device comprising:

(Appendix 8) The communication log acquisition means collects communication logs from the plurality of second devices when the first device transmits control messages to the plurality of second devices, respectively.
The unsent control message specifying means specifies the control message that has influenced the unsent control message based on the influence information that stores information related to the effect of the transmission of the control message on the transmission of another control message. The communication error information output device according to appendix 7, wherein:

(Supplementary note 9) The control message correspondence information is exchanged between the second device and the third device in association with identification information of a control message transmitted from the first device to the second device. Storing the identification information of the control message and the identification information of the third device,
The unsent control message specifying means reads the control message correspondence information, and based on the read control message correspondence information and the communication log acquired by the communication log acquisition means, an unsent control message that has not been transmitted and 9. The communication error information output device according to appendix 7 or 8, wherein the second device or the third device that cannot transmit the control message is specified.

  As described above, the communication error information output program, the communication error information output method, and the communication error information output device according to the present invention are useful when controlling IT system resources by autonomous operation, and in particular, communicate with the IT system. It is suitable when it is required to quickly identify the cause when an error occurs.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a diagram for explaining an overview and a configuration of an IT resource control apparatus according to a first embodiment. It is a figure which shows an example of the execution log output by the management module which concerns on the present Example 1. FIG. It is a figure which shows an example of the communication pattern repository which concerns on the present Example 1. FIG. 6 is a flowchart illustrating a processing procedure of a log analysis unit according to the first embodiment. FIG. 5 is a flowchart showing a processing procedure of normality / abnormality determination processing shown in FIG. 4. FIG. It is a flowchart which shows the process sequence of the cause location determination process shown in FIG. It is a figure for demonstrating the outline | summary and structure of the IT resource control apparatus which concern on the present Example 2. FIG. It is a figure which shows an example of the combined communication pattern repository which concerns on the present Example 2. FIG. It is a figure which shows an example of the combined log which concerns on the present Example 2. FIG. 10 is a flowchart illustrating a processing procedure of a combined log analysis unit according to the second embodiment. It is a flowchart which shows the process sequence of the cause location determination process by the dependency shown in FIG. It is a figure which shows an example of the cause location specific process by dependency. It is a functional block diagram which shows the structure of the computer which executes a communication error information output program. It is a figure for demonstrating the autonomous operation in the conventional IT system. It is a figure for demonstrating the subject of the autonomous operation in the conventional IT system.

Explanation of symbols

100, 200 IT resource control device _{1101 3} controlled object resource 120 _{1-120 3} management module 121 _{1-121 3} Execution Log 130 execution control module 140 _{1-140 3,} 240 ₁ to 240 ₃ communication data acquiring unit 141 ₁ -141 ₃ Communication pattern repository 142 ₁ -142 ₃ Log analysis unit 143 ₁ -143 ₃ , 254 Log analysis result 250 Log collection module 251 Combined communication pattern repository 252 Combined log analysis unit 253 Combined log 300 Computer 310 RAM
311 Communication error information output program 320 CPU
321 Communication error information output process 330 HDD
340 LAN interface 350 I / O interface 360 DVD drive 1 operation management procedure 10 resource 20 management module 30 execution control module CM1, CM2 instruction message RM1, RM2 response message

Claims (5)

In the information processing system in which the first device controls the third device via the second device, communication performed between the first device and the second device or the second device and the third device A communication error information output program for causing a computer to execute output processing of information relating to a communication error occurring in communication performed between the first device and the control message transmitted from the first device to the second device A communication log acquisition procedure for acquiring a communication log in which a communication message exchanged between the second device and the third device is recorded according to
A control storing identification information of a control message exchanged between the second device and the third device in association with identification information of a control message transmitted from the first device to the second device Reading the message correspondence information, based on the read control message correspondence information and the communication log acquired by the communication log acquisition procedure, an unsent control message specifying procedure for specifying an unsent control message that has not been transmitted,
A control message information output procedure for outputting information related to an unsent control message identified by the unsent control message identification procedure;
A communication error information output program for causing a computer to execute The communication log acquisition procedure collects communication logs from the plurality of second devices when the first device transmits control messages to the plurality of second devices, respectively.
The unsent control message identification procedure identifies the control message that has influenced the unsent control message based on the influence information that stores information related to the effect of the transmission of the control message on the transmission of other control messages. The communication error information output program according to claim 1, wherein: The control message correspondence information is a control message exchanged between the second device and the third device in association with identification information of a control message transmitted from the first device to the second device. Storing the identification information and the identification information of the third device,
The unsent control message specifying procedure reads the control message correspondence information, and based on the read control message correspondence information and the communication log acquired by the communication log acquisition procedure, an unsent control message that has not been transmitted and The communication error information output program according to claim 1 or 2, wherein the second device or the third device that cannot transmit the control message is specified. In the information processing system in which the first device controls the third device via the second device, communication performed between the first device and the second device or the second device and the third device A communication error information output method in which a computer executes output processing of information relating to a communication error that has occurred in communication performed between
Communication for obtaining a communication log in which a communication message exchanged between the second device and the third device is recorded in response to a control message transmitted from the first device to the second device Log acquisition process;
A control storing identification information of a control message exchanged between the second device and the third device in association with identification information of a control message transmitted from the first device to the second device Reading the message correspondence information, based on the read control message correspondence information and the communication log acquired by the communication log acquisition step, an unsent control message specifying step for specifying an unsent control message that has not been transmitted,
A control message information output step for outputting information related to the untransmitted control message specified by the untransmitted control message specifying step;
A communication error information output method comprising: In the information processing system in which the first device controls the third device via the second device, communication performed between the first device and the second device or the second device and the third device A communication error information output device that outputs information related to a communication error that has occurred in communication performed between
Communication for obtaining a communication log in which a communication message exchanged between the second device and the third device is recorded in response to a control message transmitted from the first device to the second device Log acquisition means;
A control storing identification information of a control message exchanged between the second device and the third device in association with identification information of a control message transmitted from the first device to the second device Read the message correspondence information, based on the read control message correspondence information and the communication log acquired by the communication log acquisition means, an unsent control message specifying means for specifying an unsent control message that has not been transmitted,
Control message information output means for outputting information related to the untransmitted control message specified by the untransmitted control message specifying means;
A communication error information output device comprising:

Images